Creating Secure Requests with Authsub?

1 message Options
Embed this post
Permalink
Greg Jones-3

Creating Secure Requests with Authsub?

Reply Threaded More More options
Print post
Permalink
Hi,

I notice in the manual[1] that it says that secure tokens aren't supported  
due to a lack of support for passing certificates to obtain the secure  
token, but I'm a bit confused about what this means. I've registered my  
domain with Google and have the option to upload a certificate to them,  
and then their documentation[2] gives instructions on what to include in  
the Authorization header along with the token. With my limited  
understanding of how this all works, it seems like making the changes to  
support secure tokens wouldn't be all that difficult (though would  
probably want to make use of Zend_Crypt...), but it's entirely possible  
(probable?) that I'm completely missing something. If it is more difficult  
than this/impossible, then if someone has the time to explain why before I  
have a go at changing things, I'd be extremely grateful.

thanks,

Greg

[1] "Zend_Gdata currently does not support use of secure tokens, because  
the AuthSub authentication does not support passing a digital certificate  
to acquire a secure token."
[2]  
http://code.google.com/apis/accounts/docs/AuthForWebApps.html#signingrequests